Specialist, Data Privacy

Role Overview

The Specialist, Data Privacy plays an integral role in shaping and administering Brother's data privacy program within the Legal Department. This role is responsible for the day-to-day operation of the privacy program across the US, Canada, and Latin America regions, including data subject access requests (DSARs), data privacy assessments, TrustArc administration, cookie management and classification, the Company's data privacy framework, and annual Data Privacy Framework (DPF) recertification. The role serves as a trusted advisor to business stakeholders, translating legal requirements into practical processes and controls, and escalating legal issues to the supervising attorney. This role builds strong relationships with internal clients to understand business goals while identifying privacy risks and opportunities that support Brother's objectives.

Duties & Responsibilities

Data Privacy Program and Framework

• • Maintain and continuously improve the Company's data privacy framework, including governance structure, policies, standards, procedures, and controls aligned with applicable laws and industry best practices
  • Collaborate closely with the Legal Department, Information Governance, regional leadership, and Cyber Security to oversee and manage the privacy program
  • Coordinate implementation of the privacy program with data protection champions across the US, Canada, and Latin America regions
  • Monitor emerging data privacy laws and regulations and, under the direction of the supervising attorney, lead projects to enhance compliance
  • Participate in internal design discussions to ensure data protection requirements are defined early and throughout the development lifecycle of new projects (Privacy by Design)
  • Provide up-to-date program metrics and reporting to Legal leadership and management

Data Subject Access Requests (DSAR)

• • Administer and oversee the DSAR workflow for the US and Canada, including intake, identity verification, data collection, review, response, and closure within required timelines
  • Partner with IT, Legal, and business units in each region to complete requests accurately and completely, including redaction or anonymization of sensitive information
  • Escalate complex, sensitive, or disputed requests to the supervising attorney for legal review
  • Maintain DSAR records and metrics, and train stakeholders in each region on their roles within the process
  • Continuously assess and enhance the DSAR workflow to keep pace with regulatory changes and leverage technology for efficiency

Data Privacy Assessments

• • Lead the execution of data privacy impact assessments (DPIAs) and other privacy risk assessments on new and existing processing activities, systems, vendors, and strategic business initiatives
  • Collaborate with business units, IT, Cyber Security, and Legal to identify processing activities that may pose risks to individuals' privacy
  • Document assessment processes, identified risks, and recommended mitigation measures, and track remediation through completion
  • Collaborate with third-party vendors and partners to confirm data privacy and protection obligations are met
  • Communicate assessment findings and recommendations to the supervising attorney, management, and stakeholders to support informed decision-making

TrustArc Administration and Data Privacy Framework (DPF) Recertification

• • Administer the TrustArc privacy management platform to document, track, and support compliance with privacy policies and regulations, including user access, assessments, workflows, and reporting.
  • Coordinate the annual TRUSTe verification for the EU-U.S. and Swiss-U.S. Data Privacy Framework, including completing questionnaires, conducting privacy reviews, and addressing findings through action plans
  • Prepare and submit the annual Department of Commerce DPF recertification on behalf of the organization, following review and approval by the supervising attorney
  • Maintain a recertification calendar, supporting evidence, and records to confirm ongoing compliance with DPF principles and related privacy notice requirements

Policies, Training, and Communications

• • Draft amendments to, or new, internal data protection policies, guidelines, and procedures in consultation with the supervising attorney and key stakeholders in response to changes in applicable laws
  • Create supporting documents, such as standard operating procedures, job aids, and forms, consistent with Brother templates, guidelines, and styles
  • Act as a resource for privacy policy and procedure inquiries from employees, escalating legal questions to the supervising attorney as appropriate
  • Develop and deliver privacy training and awareness content, and maintain the privacy training course lifecycle, including assignment, tracking, and completion reporting

Cookie Management and Classification

• • Administer the cookie consent management program across Company websites and digital properties, including consent banners and preference centers
  • Conduct and review periodic cookie and tracker scans; classify cookies and similar technologies into appropriate categories (e.g., strictly necessary, functional, performance/analytics, targeting/advertising)
  • Partner with Marketing, Digital, IT, and vendors to remediate unclassified or non-compliant cookies and keep cookie disclosures accurate and current
  • Monitor regulatory developments affecting cookies and online tracking and recommend program updates to the supervising attorney

Data Classification and Record Retention

• • Support data inventory, data mapping, and records of processing activities, and help classify personal and sensitive data in accordance with Company data classification standards
  • Administer the Company's records retention policy and schedule, ensuring records are correctly classified and assigned the correct retention period
  • Assist departments in applying the retention schedule and coordinate and track destruction of obsolete records
  • Review data flows, policies, and data classification documents to identify gaps in privacy practices

Departmental Support

• • Coordinate and facilitate special privacy projects as assigned by the Legal Department
  • Liaise with the US, Canada, and Latin America offices and their advisory committees to support implementation and continuous improvement of the privacy program
  • Assist with audit requests requiring data privacy information and with budget items related to the privacy program, including timely processing of invoices
  • Maintain current knowledge of data privacy developments through relevant professional organizations, conferences, and seminars

Experience & Qualifications

Education

• • Bachelor's Degree (or equivalent experience) Business, Law, Philosophy, IT, or related field

Experience

Minimum 5 years

• • Experience in data privacy, data protection, or information governance, including coordinating risk assessments, identifying control gaps, and proposing mitigation strategies;
  • Experience managing DSARs, privacy assessments, and cookie consent management

Minimum 3 years

• • Experience supporting Data Privacy Framework certification or verification

Licenses and Certifications

• • CIPP Certified Information Privacy Professional (US/CAN)

Languages

• • Spanish (Preferred)
  • Portuguese (Preferred)

Software/Technical Skills

• • Microsoft Office (Outlook, Word, Excel, PowerPoint, Teams)
  • Microsoft Visio and Adobe Acrobat
  • SharePoint
  • TrustArc or comparable privacy management platform
  • Cookie consent management tools

Other Skills/Knowledge/Abilities

• • Strong ability to interpret regulatory requirements and translate them into actionable business and technical controls
  • Attention to detail in reviewing data flows, policies, and data classification documents to identify gaps in privacy practices
  • Strong analytical skills with the ability to synthesize information from different sources to focus on privacy issues and risks
  • Sound judgment and the ability to recognize when to escalate legal issues to the supervising attorney
  • Strong sense of ethics and integrity in handling sensitive data and privacy concerns
  • Proficient project management and organizational skills; ability to manage multiple tasks and deadlines while prioritizing appropriately
  • Strong written and verbal communication skills; comfortable communicating with senior leaders of the Brother business
  • Ability to educate and train on data privacy practices, policies, and legal requirements
  • Strong ability to work collaboratively and build relationships across the business at all levels

Additional Details for This Role

This role will be a hybrid role. Subject to business needs, employees may work remotely up to two days per week. Assigned office days will be determined by your manager.

Base Salary

• • The targeted base salary range for this position is $ 95,000 - $ 120,000 per year.
  • Base salary is determined by the education, experience, knowledge, skills, and abilities of the successful candidate, as well as factors such as internal equity, cost of labor in the hiring location, and alignment with market data.

Additional Compensation

• • This position is eligible for a 5% bonus at 100% of target, with the opportunity to achieve above 100% dependent on company performance and in alignment with company bonus plans.
  • Bonus awards are discretionary and contingent upon individual performance as well as Brother achieving its corporate objectives, in accordance with the applicable bonus plan in effect.